diff --git a/config/brakeman.ignore b/config/brakeman.ignore index def63fdfe..2b01354c6 100644 --- a/config/brakeman.ignore +++ b/config/brakeman.ignore @@ -46,7 +46,30 @@ 95 ], "note": "" + }, + { + "warning_type": "Remote Code Execution", + "warning_code": 24, + "fingerprint": "b00571393e95a8c7d77b1ed963cfc5cc89333bc82f447cf8783549d817990305", + "check_name": "UnsafeReflection", + "message": "Unsafe reflection method `safe_constantize` called on model attribute", + "file": "app/models/notifier.rb", + "line": 8, + "link": "https://brakemanscanner.org/docs/warning_types/remote_code_execution/", + "code": "\"Notifier::#{Event.eventable.class}EventNotifier\".safe_constantize", + "render_path": null, + "location": { + "type": "method", + "class": "Notifier", + "method": "s(:self).for" + }, + "user_input": "Event.eventable.class", + "confidence": "Medium", + "cwe_id": [ + 470 + ], + "note": "" } ], - "brakeman_version": "7.0.0" + "brakeman_version": "7.0.2" }